https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:51:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-93239 EUVD-2026-93239 https://cve.radiocsirt.org/vuln/euvd-2026-93239 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5236 <p>It was discovered that the IcedTea-Web used codebase attribute of the &lt;applet&gt; tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet&#39;s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.</p> <p>It was discovered that the IcedTea-Web used codebase attribute of the &lt;applet&gt; tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet&#39;s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5236 https://cve.radiocsirt.org/vuln/ghsa-f95f-r783-xxx3 <p>It was discovered that the IcedTea-Web used codebase attribute of the &lt;applet&gt; tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet&#39;s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.</p> <p>It was discovered that the IcedTea-Web used codebase attribute of the &lt;applet&gt; tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet&#39;s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.</p> https://cve.radiocsirt.org/vuln/ghsa-f95f-r783-xxx3 https://cve.radiocsirt.org/vuln/gsd-2015-5236 gsd-2015-5236 https://cve.radiocsirt.org/vuln/gsd-2015-5236 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5236 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icedtea-web, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:22.04:LTS: icedtea-web, Ubuntu:24.04:LTS: icedtea-web, Ubuntu:25.10: icedtea-web, Ubuntu:26.04:LTS: icedtea-web</p> <p>It was discovered that the IcedTea-Web used codebase attribute of the &lt;applet&gt; tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet&#39;s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icedtea-web, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:22.04:LTS: icedtea-web, Ubuntu:24.04:LTS: icedtea-web, Ubuntu:25.10: icedtea-web, Ubuntu:26.04:LTS: icedtea-web</p> <p>It was discovered that the IcedTea-Web used codebase attribute of the &lt;applet&gt; tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet&#39;s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5236